Not unless that user is a member of the local Administrators Group.
So, any local admin has Windows Auth access to the server by default. It
doesn't matter who ran setup per se.
Local admin privleges are required to install services.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.
Hi Kevin,
I'm trying to find out the following:
1. Whether that Windows User login(the one installed the SQL Server) is
always created automatically during installing a SQL Server using Windows
Authentication or not.
Based on my testing in installing SQL Server with Windows Authentication
when I logged onto the domain, the following logins are created automatically:
sa
BUILTIN\Administrators
domain\user - the Windows User who logged onto the domain
2. Can a user who has local administrative permissions log on to the
operating system locally (so he/she is not logged onto the domain) and
install a SQL Server using Windows Authentication? If yes, since the user
only logs on locally, I guess that only sa and BUILTIN\Administrators logins
are created automatically. Am I right?
So, basically I want to know what logins are created automatically in
installing a SQL Server using Windows Authentication when:
1. the user is logged on locally
2. the user is logged onto the domain
Thanks.
> Not unless that user is a member of the local Administrators Group.
> So, any local admin has Windows Auth access to the server by default. It
[quoted text clipped - 7 lines]
>
> This posting is provided AS IS with no warranties, and confers no rights.
Kevin McDonnell [MSFT] - 25 Feb 2005 00:03 GMT
I think the confusion may be in that the account specified to start the
services is added to the logins.
If you specify in setup that a local windows account or domain account
should be used to start the services, (MSSQL and SQL Agent)
then this account is added to the logins.
If you selected to start the service with 'localsystem' which I don't
recommend, then only the Builtin\admin and sa account is
added to the logins.
Hope this helps.
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.
Peter - 25 Feb 2005 02:37 GMT
Hi Kevin,
Yes, I use a domain account to start MSSQL and SQL Agent. I don't remember
seeing any information about this account will be added to logins.
Thanks,
Peter
> I think the confusion may be in that the account specified to start the
> services is added to the logins.
[quoted text clipped - 13 lines]
>
> This posting is provided AS IS with no warranties, and confers no rights.